Bug 2437111 (CVE-2025-68121)

Summary:	CVE-2025-68121 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aazores, abarbaro, abrianik, adistefa, akostadi, akoudelk, alcohan, alebedev, alizardo, amasferr, amctagga, anjoseph, anpicker, ansmith, anthomas, aoconnor, asatyam, ataylor, bdettelb, bniver, bparees, chfoley, ckandaga, cmah, crizzo, csutherl, dbruscin, dhanak, diagrawa, dmayorov, doconnor, drosa, dschmidt, dsimansk, dsoumis, dymurray, eaguilar, ebaron, eborisov, eglynn, ehelms, erezende, ewittman, fdeutsch, flucifre, ggainey, ggrzybek, gmeno, gparvin, groman, hasun, ibolton, janstey, jbalunas, jburrell, jcantril, jchui, jclere, jeder, jfula, jhe, jjoyce, jkoehler, jlanda, jlledo, jmatthew, jmontleo, jolong, jowilson, jprabhak, jpretori, jraez, jschluet, jscholz, juwatts, kingland, kshier, ktsao, kvanderr, kverlaen, lball, lbragsta, lchilton, lgamliel, lhh, lphiri, manissin, mattdavi, matzew, mbenjamin, mbocek, mburns, mgarciac, mhackett, mhulan, mnovotny, mrunge, mwringe, nboldt, ngough, nipatil, nmoumoul, nyancey, oaljalju, ometelka, oramraz, osousa, pahickey, pantinor, parichar, pcreech, peholase, pgaikwad, pjindal, plodge, psrna, ptisnovs, pvasanth, rchan, rfreiman, rgodfrey, rhaigner, rhel-process-autobot, rjohnson, rkubis, rmaucher, rojacob, sabiswas, sakbas, sausingh, sdawley, sfeifer, simaishi, slucidi, smallamp, smalloy, smcdonal, smullick, sostapov, sseago, stcannon, stirabos, swoodman, syedriko, szappis, tasato, teagle, thason, tmalecek, tsedmik, tzivkovi, vereddy, veshanka, vimartin, vkarehfa, watson-tool-maintainers, wenshen, whayutin, wtam, xdharmai, yguenane
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2439295
Bug Blocks:

Description OSIDB Bzimport 2026-02-05 18:01:53 UTC

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.

Comment 3 errata-xmlrpc 2026-02-16 09:35:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:2706 https://access.redhat.com/errata/RHSA-2026:2706

Comment 4 errata-xmlrpc 2026-02-16 09:59:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:2708 https://access.redhat.com/errata/RHSA-2026:2708

Comment 5 errata-xmlrpc 2026-02-16 10:28:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:2709 https://access.redhat.com/errata/RHSA-2026:2709

Comment 6 errata-xmlrpc 2026-02-18 11:26:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:2914 https://access.redhat.com/errata/RHSA-2026:2914

Comment 7 errata-xmlrpc 2026-02-18 12:50:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:2920 https://access.redhat.com/errata/RHSA-2026:2920

Comment 14 errata-xmlrpc 2026-02-23 01:24:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3035 https://access.redhat.com/errata/RHSA-2026:3035

Comment 15 errata-xmlrpc 2026-02-23 02:07:32 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3040 https://access.redhat.com/errata/RHSA-2026:3040

Comment 16 errata-xmlrpc 2026-02-23 15:30:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3092 https://access.redhat.com/errata/RHSA-2026:3092

Comment 17 errata-xmlrpc 2026-02-24 11:31:45 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3192 https://access.redhat.com/errata/RHSA-2026:3192

Comment 18 errata-xmlrpc 2026-02-24 11:32:55 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3187 https://access.redhat.com/errata/RHSA-2026:3187

Comment 19 errata-xmlrpc 2026-02-24 11:36:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3188 https://access.redhat.com/errata/RHSA-2026:3188

Comment 20 errata-xmlrpc 2026-02-24 11:54:48 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3193 https://access.redhat.com/errata/RHSA-2026:3193

Comment 21 errata-xmlrpc 2026-02-25 07:34:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3291 https://access.redhat.com/errata/RHSA-2026:3291

Comment 22 errata-xmlrpc 2026-02-25 09:04:37 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3297 https://access.redhat.com/errata/RHSA-2026:3297

Comment 23 errata-xmlrpc 2026-02-25 09:04:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3297 https://access.redhat.com/errata/RHSA-2026:3297

Comment 24 errata-xmlrpc 2026-02-25 09:04:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3297 https://access.redhat.com/errata/RHSA-2026:3297

Comment 25 errata-xmlrpc 2026-02-25 09:26:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3298 https://access.redhat.com/errata/RHSA-2026:3298

Comment 26 errata-xmlrpc 2026-02-25 09:26:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3298 https://access.redhat.com/errata/RHSA-2026:3298

Comment 27 errata-xmlrpc 2026-02-25 09:26:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3298 https://access.redhat.com/errata/RHSA-2026:3298

Comment 28 errata-xmlrpc 2026-02-25 11:24:10 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3336 https://access.redhat.com/errata/RHSA-2026:3336

Comment 29 errata-xmlrpc 2026-02-25 11:24:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3336 https://access.redhat.com/errata/RHSA-2026:3336

Comment 30 errata-xmlrpc 2026-02-25 11:24:12 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3336 https://access.redhat.com/errata/RHSA-2026:3336

Comment 31 errata-xmlrpc 2026-02-25 11:42:08 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3337 https://access.redhat.com/errata/RHSA-2026:3337

Comment 32 errata-xmlrpc 2026-02-25 11:46:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3343 https://access.redhat.com/errata/RHSA-2026:3343

Comment 33 errata-xmlrpc 2026-02-25 12:08:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3341 https://access.redhat.com/errata/RHSA-2026:3341

Comment 34 errata-xmlrpc 2026-02-25 12:10:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3340 https://access.redhat.com/errata/RHSA-2026:3340

Comment 35 errata-xmlrpc 2026-02-26 02:56:43 UTC

This issue has been addressed in the following products:

  Cryostat 4 on RHEL 9

Via RHSA-2026:3186 https://access.redhat.com/errata/RHSA-2026:3186

Comment 37 errata-xmlrpc 2026-03-02 06:39:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3506 https://access.redhat.com/errata/RHSA-2026:3506

Comment 38 errata-xmlrpc 2026-03-04 15:24:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3752 https://access.redhat.com/errata/RHSA-2026:3752

Comment 39 errata-xmlrpc 2026-03-04 15:43:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3753 https://access.redhat.com/errata/RHSA-2026:3753

Comment 40 errata-xmlrpc 2026-03-05 05:37:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3816 https://access.redhat.com/errata/RHSA-2026:3816

Comment 41 errata-xmlrpc 2026-03-05 06:18:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3817 https://access.redhat.com/errata/RHSA-2026:3817

Comment 42 errata-xmlrpc 2026-03-05 07:46:15 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3831 https://access.redhat.com/errata/RHSA-2026:3831

Comment 43 errata-xmlrpc 2026-03-05 08:16:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3833 https://access.redhat.com/errata/RHSA-2026:3833

Comment 44 errata-xmlrpc 2026-03-05 09:33:57 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3840 https://access.redhat.com/errata/RHSA-2026:3840

Comment 45 errata-xmlrpc 2026-03-05 09:51:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3843 https://access.redhat.com/errata/RHSA-2026:3843

Comment 46 errata-xmlrpc 2026-03-05 10:03:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3839 https://access.redhat.com/errata/RHSA-2026:3839

Comment 47 errata-xmlrpc 2026-03-05 11:18:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3842 https://access.redhat.com/errata/RHSA-2026:3842

Comment 48 errata-xmlrpc 2026-03-05 11:31:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3864 https://access.redhat.com/errata/RHSA-2026:3864

Comment 49 errata-xmlrpc 2026-03-05 14:26:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3898 https://access.redhat.com/errata/RHSA-2026:3898

Comment 50 errata-xmlrpc 2026-03-05 16:35:12 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:3928 https://access.redhat.com/errata/RHSA-2026:3928

Comment 51 errata-xmlrpc 2026-03-05 17:17:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:3929 https://access.redhat.com/errata/RHSA-2026:3929

Comment 52 errata-xmlrpc 2026-03-09 01:24:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3970 https://access.redhat.com/errata/RHSA-2026:3970

Comment 53 errata-xmlrpc 2026-03-09 01:28:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:3971 https://access.redhat.com/errata/RHSA-2026:3971

Comment 54 errata-xmlrpc 2026-03-09 01:48:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:3977 https://access.redhat.com/errata/RHSA-2026:3977

Comment 55 errata-xmlrpc 2026-03-09 02:05:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:3985 https://access.redhat.com/errata/RHSA-2026:3985

Comment 56 errata-xmlrpc 2026-03-10 09:22:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:4166 https://access.redhat.com/errata/RHSA-2026:4166

Comment 57 errata-xmlrpc 2026-03-10 09:24:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:4164 https://access.redhat.com/errata/RHSA-2026:4164

Comment 58 errata-xmlrpc 2026-03-10 12:08:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:4174 https://access.redhat.com/errata/RHSA-2026:4174

Comment 59 errata-xmlrpc 2026-03-10 19:17:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:4177 https://access.redhat.com/errata/RHSA-2026:4177

Comment 60 errata-xmlrpc 2026-03-11 05:13:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:4256 https://access.redhat.com/errata/RHSA-2026:4256

Comment 61 errata-xmlrpc 2026-03-11 05:59:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:4264 https://access.redhat.com/errata/RHSA-2026:4264

Comment 62 errata-xmlrpc 2026-03-11 07:33:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:4267 https://access.redhat.com/errata/RHSA-2026:4267

Comment 63 errata-xmlrpc 2026-03-17 03:46:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:4672 https://access.redhat.com/errata/RHSA-2026:4672

Comment 64 errata-xmlrpc 2026-03-18 08:02:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:4892 https://access.redhat.com/errata/RHSA-2026:4892

Comment 65 errata-xmlrpc 2026-03-18 10:57:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:4907 https://access.redhat.com/errata/RHSA-2026:4907

Comment 66 errata-xmlrpc 2026-03-18 10:58:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:4901 https://access.redhat.com/errata/RHSA-2026:4901

Comment 67 errata-xmlrpc 2026-03-18 21:06:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:4952 https://access.redhat.com/errata/RHSA-2026:4952

Comment 68 errata-xmlrpc 2026-03-19 15:58:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:5146 https://access.redhat.com/errata/RHSA-2026:5146

Comment 69 errata-xmlrpc 2026-03-19 23:38:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:5077 https://access.redhat.com/errata/RHSA-2026:5077

Comment 70 errata-xmlrpc 2026-03-26 20:26:00 UTC

This issue has been addressed in the following products:

  Red Hat Satellite 6.17 for RHEL 9

Via RHSA-2026:5970 https://access.redhat.com/errata/RHSA-2026:5970

Comment 71 errata-xmlrpc 2026-03-26 20:26:56 UTC

This issue has been addressed in the following products:

  Red Hat Satellite 6.16 for RHEL 8
  Red Hat Satellite 6.16 for RHEL 9

Via RHSA-2026:5971 https://access.redhat.com/errata/RHSA-2026:5971

Comment 72 errata-xmlrpc 2026-03-31 16:03:19 UTC

This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.6 for RHEL 9
  Red Hat Ansible Automation Platform 2.6 for RHEL 10

Via RHSA-2026:6277 https://access.redhat.com/errata/RHSA-2026:6277

Comment 73 errata-xmlrpc 2026-03-31 16:11:22 UTC

This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.5 for RHEL 8
  Red Hat Ansible Automation Platform 2.5 for RHEL 9

Via RHSA-2026:6278 https://access.redhat.com/errata/RHSA-2026:6278

Comment 74 errata-xmlrpc 2026-04-01 09:24:16 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2026:5866 https://access.redhat.com/errata/RHSA-2026:5866

Comment 75 errata-xmlrpc 2026-04-01 10:12:12 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:5876 https://access.redhat.com/errata/RHSA-2026:5876

Comment 78 errata-xmlrpc 2026-04-09 08:25:25 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:6552 https://access.redhat.com/errata/RHSA-2026:6552

Comment 79 errata-xmlrpc 2026-04-13 12:42:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:7854 https://access.redhat.com/errata/RHSA-2026:7854

Comment 81 errata-xmlrpc 2026-04-20 18:45:01 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9097 https://access.redhat.com/errata/RHSA-2026:9097

Comment 82 errata-xmlrpc 2026-04-20 18:46:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9098 https://access.redhat.com/errata/RHSA-2026:9098

Comment 83 errata-xmlrpc 2026-04-20 19:48:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9109 https://access.redhat.com/errata/RHSA-2026:9109

Comment 84 errata-xmlrpc 2026-04-20 19:49:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:9108 https://access.redhat.com/errata/RHSA-2026:9108

Comment 125 errata-xmlrpc 2026-04-29 04:15:09 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Services on OpenShift 18.0

Via RHSA-2026:7885 https://access.redhat.com/errata/RHSA-2026:7885

Comment 126 errata-xmlrpc 2026-04-29 14:23:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:11749 https://access.redhat.com/errata/RHSA-2026:11749

Comment 127 errata-xmlrpc 2026-04-30 02:53:26 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12029 https://access.redhat.com/errata/RHSA-2026:12029

Comment 128 errata-xmlrpc 2026-04-30 02:55:29 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12028 https://access.redhat.com/errata/RHSA-2026:12028

Comment 129 errata-xmlrpc 2026-04-30 03:21:44 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12031 https://access.redhat.com/errata/RHSA-2026:12031

Comment 130 errata-xmlrpc 2026-04-30 03:24:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12030 https://access.redhat.com/errata/RHSA-2026:12030

Comment 131 errata-xmlrpc 2026-04-30 03:27:17 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12032 https://access.redhat.com/errata/RHSA-2026:12032

Comment 132 errata-xmlrpc 2026-04-30 03:29:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:12033 https://access.redhat.com/errata/RHSA-2026:12033

Comment 135 errata-xmlrpc 2026-05-04 23:38:16 UTC

This issue has been addressed in the following products:

  Streams for Apache Kafka 3.2.0

Via RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:13571

Comment 136 errata-xmlrpc 2026-05-07 18:11:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:14868 https://access.redhat.com/errata/RHSA-2026:14868